Single Sign-On with Okta (SAML)

Learn how to configure Okta as a SAML-based identity provider.

Create a SAML Connection for a New App

1. In Your application (like Kandji), navigate to the Settings page
2. Click the Access tab
3. Find the Authentication section and click the Add button on the bottom left of the authentication section (If that section does not appear, SSO is not enabled for your instance)
4. In the Add SSO Connection pane, select the Custom SAML option
5. Click Next

1. Select Show Advanced Details
2. Copy the Assertion Consumer Service URL and save it in a text document for later use
3. Copy the Entity ID and save it too
   

Leave this browser tab open as you proceed with the instructions below

Now in Okta

1. In a new browser tab, log in to your Okta tenant
2. On the left-hand side, click the reveal triangle next to Applications
3. Click Applications

Click Create App Integration

Select SAML 2.0 as the app integration type and click Next

1. Enter an App name
2. Upload an optional App logo
3. Click Next

1. In the Single sign on URL field, paste the Kandji Assertion Consumer Service URL that was copied earlier
2. In the Audience URI (SP Entity ID) field, paste the Kandji Entity ID that was copied earlier
3. Ensure that the Name ID format is set to Unspecified
4. Ensure that the Application username is set to Okta username
5. Ensure that the Update application username on is set to Create and update
6. Select Next

1. Select I’m an Okta customer adding an internal app
2. Select This is an internal app that we have created
3. Click Finish.